@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.2

package/dist/routes/integrations.js

@@ -0,0 +1,211 @@
+/**
+ * Integration routes — linking an external messaging account to a NodeTool
+ * user, and exchanging that mapping for a short-lived delegated token.
+ *
+ * The caller is a bridge process (the Telegram bot, later Discord), not a
+ * browser: every route authenticates with the server's own
+ * `NODETOOL_INTEGRATION_TOKEN` rather than a user session, which is why these
+ * paths are exempt from the session-auth hook the way the webhook routes are.
+ * A server without that env var registers none of this — every path 404s.
+ *
+ * The bridge never holds a user credential. It proves *which external account*
+ * is speaking; the server decides which NodeTool user that is, and mints a
+ * token scoped to them. Tenant isolation is then the server's usual rules.
+ */
+import { timingSafeEqual } from "node:crypto";
+import { z } from "zod";
+import { mintDelegatedToken } from "@nodetool-ai/auth";
+import { ExternalIdentity } from "@nodetool-ai/models";
+import { integrationExternalIdBodySchema, integrationLinkCompleteBodySchema } from "../http-body-schemas.js";
+import { LinkCodeStore, sharedLinkCodes } from "../lib/link-codes.js";
+/** Platforms the identity layer accepts. `provider` is data, not a route. */
+const ALLOWED_PROVIDERS = ["telegram", "discord"];
+/** A service token shorter than this is refused rather than trusted. */
+const MIN_SERVICE_TOKEN_LENGTH = 16;
+/** Lifetime of a minted delegated token. */
+const DELEGATED_TOKEN_TTL_SECONDS = 60 * 60;
+/**
+ * `/link/complete` body. `user_id` is required only for a bot-minted code:
+ * a web-minted code already carries the user who was signed in when it was
+ * created, and that user wins over anything the bridge sends.
+ */
+const linkCompleteBodySchema = integrationLinkCompleteBodySchema.extend({
+    user_id: z.string().min(1).optional()
+});
+/** Whether the request carries the configured service token. */
+function hasServiceToken(req, serviceToken) {
+    const header = req.headers.authorization;
+    if (typeof header !== "string")
+        return false;
+    const parts = header.split(/\s+/);
+    if (parts.length !== 2 || parts[0].toLowerCase() !== "bearer")
+        return false;
+    const presented = Buffer.from(parts[1], "utf-8");
+    const expected = Buffer.from(serviceToken, "utf-8");
+    return (presented.length === expected.length &&
+        timingSafeEqual(presented, expected));
+}
+function readProvider(req) {
+    const params = req.params;
+    const provider = params.provider;
+    if (typeof provider !== "string")
+        return null;
+    return ALLOWED_PROVIDERS.includes(provider)
+        ? provider
+        : null;
+}
+/**
+ * The base URL a link confirmation page is reachable at, taken from the
+ * request the bridge made. `NODETOOL_PUBLIC_URL` wins when set, because a
+ * bridge on the same host reaches the server at an address the user's browser
+ * may not.
+ */
+function baseUrl(req) {
+    const configured = process.env["NODETOOL_PUBLIC_URL"];
+    if (configured)
+        return configured.replace(/\/+$/, "");
+    const host = req.headers.host ?? "127.0.0.1:7777";
+    return `${req.protocol}://${host}`;
+}
+export function createIntegrationRoutes(options) {
+    const now = options.now ?? Date.now;
+    const linkCodes = options.linkCodes ??
+        (options.now ? new LinkCodeStore({ now: options.now }) : sharedLinkCodes);
+    return async (app) => {
+        const serviceToken = process.env["NODETOOL_INTEGRATION_TOKEN"];
+        if (!serviceToken || serviceToken.length < MIN_SERVICE_TOKEN_LENGTH) {
+            // No service token, no surface: the routes are never registered, so
+            // every path answers 404 rather than 401.
+            return;
+        }
+        /** Common preamble: service token, then provider. */
+        const authorize = (req, reply) => {
+            if (!hasServiceToken(req, serviceToken)) {
+                reply.status(401).send({ error: "Unauthorized" });
+                return null;
+            }
+            const provider = readProvider(req);
+            if (!provider) {
+                reply.status(400).send({
+                    error: `Unknown integration provider. Expected one of: ${ALLOWED_PROVIDERS.join(", ")}`
+                });
+                return null;
+            }
+            return provider;
+        };
+        app.post("/api/integrations/:provider/link/start", async (req, reply) => {
+            const provider = authorize(req, reply);
+            if (!provider)
+                return;
+            const body = integrationExternalIdBodySchema.safeParse(req.body);
+            if (!body.success) {
+                reply.status(400).send({ error: "external_id is required" });
+                return;
+            }
+            const { code, expiresAtMs } = linkCodes.mintForExternalAccount(provider, body.data.external_id);
+            reply.send({
+                code,
+                url: `${baseUrl(req)}/integrations/link?code=${encodeURIComponent(code)}`,
+                expires_at: new Date(expiresAtMs).toISOString()
+            });
+        });
+        app.post("/api/integrations/:provider/link/complete", async (req, reply) => {
+            const provider = authorize(req, reply);
+            if (!provider)
+                return;
+            const body = linkCompleteBodySchema.safeParse(req.body);
+            if (!body.success) {
+                reply
+                    .status(400)
+                    .send({ error: "external_id, code and user_id are required" });
+                return;
+            }
+            const pending = linkCodes.consume(body.data.code);
+            if (!pending) {
+                reply
+                    .status(410)
+                    .send({ error: "This link code has expired or was already used" });
+                return;
+            }
+            if (pending.provider !== provider) {
+                reply
+                    .status(400)
+                    .send({ error: "This link code was issued for a different account" });
+                return;
+            }
+            // A web-minted code carries the user who was signed in when it was
+            // created; the bridge supplies the external account it belongs to.
+            // A bot-minted code is the mirror image, and the browser that redeems
+            // it is what names the user.
+            let userId;
+            if (pending.kind === "user") {
+                userId = pending.userId;
+            }
+            else {
+                if (pending.externalId !== body.data.external_id) {
+                    reply.status(400).send({
+                        error: "This link code was issued for a different account"
+                    });
+                    return;
+                }
+                if (!body.data.user_id) {
+                    reply
+                        .status(400)
+                        .send({ error: "external_id, code and user_id are required" });
+                    return;
+                }
+                userId = body.data.user_id;
+            }
+            await ExternalIdentity.link({
+                provider,
+                externalId: body.data.external_id,
+                userId
+            });
+            reply.send({ linked: true });
+        });
+        app.post("/api/integrations/:provider/token", async (req, reply) => {
+            const provider = authorize(req, reply);
+            if (!provider)
+                return;
+            const body = integrationExternalIdBodySchema.safeParse(req.body);
+            if (!body.success) {
+                reply.status(400).send({ error: "external_id is required" });
+                return;
+            }
+            if (!options.enforceAuth) {
+                reply.status(409).send({
+                    error: "This server runs in local single-user mode, where every request " +
+                        "is user \"1\": delegated tokens would not isolate anything. Run " +
+                        "with an enforcing auth provider (Supabase) to use integrations."
+                });
+                return;
+            }
+            const identity = await ExternalIdentity.findByExternal(provider, body.data.external_id);
+            if (!identity) {
+                reply
+                    .status(404)
+                    .send({ error: "This account is not linked to a NodeTool user" });
+                return;
+            }
+            const minted = mintDelegatedToken(options.signingKey(), identity.user_id, DELEGATED_TOKEN_TTL_SECONDS, now);
+            reply.send({
+                token: minted.token,
+                expires_at: minted.expiresAt,
+                user_id: identity.user_id
+            });
+        });
+        app.delete("/api/integrations/:provider/link", async (req, reply) => {
+            const provider = authorize(req, reply);
+            if (!provider)
+                return;
+            const body = integrationExternalIdBodySchema.safeParse(req.body);
+            if (!body.success) {
+                reply.status(400).send({ error: "external_id is required" });
+                return;
+            }
+            const unlinked = await ExternalIdentity.unlink(provider, body.data.external_id);
+            reply.send({ unlinked });
+        });
+    };
+}
+//# sourceMappingURL=integrations.js.map

package/dist/routes/integrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.js","sourceRoot":"","sources":["../../src/routes/integrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EACL,+BAA+B,EAC/B,iCAAiC,EAClC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEtE,6EAA6E;AAC7E,MAAM,iBAAiB,GAAG,CAAC,UAAU,EAAE,SAAS,CAAU,CAAC;AAE3D,wEAAwE;AACxE,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,4CAA4C;AAC5C,MAAM,2BAA2B,GAAG,EAAE,GAAG,EAAE,CAAC;AAE5C;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,iCAAiC,CAAC,MAAM,CAAC;IACtE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAwBH,gEAAgE;AAChE,SAAS,eAAe,CAAC,GAAmB,EAAE,YAAoB;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,CACL,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACpC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAmB;IACvC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAgC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAQ,iBAAuC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAChE,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,GAAmB;IAClC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACtD,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,gBAAgB,CAAC;IAClD,OAAO,GAAG,GAAG,CAAC,QAAQ,MAAM,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAiC;IAEjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,SAAS,GACb,OAAO,CAAC,SAAS;QACjB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAE5E,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YACpE,oEAAoE;YACpE,0CAA0C;YAC1C,OAAO;QACT,CAAC;QAED,qDAAqD;QACrD,MAAM,SAAS,GAAG,CAChB,GAAmB,EACnB,KAAmB,EACJ,EAAE;YACjB,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC;gBACxC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBAClD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACrB,KAAK,EAAE,kDAAkD,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACxF,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACtE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAEtB,MAAM,IAAI,GAAG,+BAA+B,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC,sBAAsB,CAC5D,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,WAAW,CACtB,CAAC;YAEF,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,kBAAkB,CAAC,IAAI,CAAC,EAAE;gBACzE,UAAU,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE;aAChD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CACN,2CAA2C,EAC3C,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACnB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAEtB,MAAM,IAAI,GAAG,sBAAsB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK;qBACF,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,KAAK;qBACF,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAClC,KAAK;qBACF,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CAAC,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC,CAAC;gBACxE,OAAO;YACT,CAAC;YAED,mEAAmE;YACnE,mEAAmE;YACnE,sEAAsE;YACtE,6BAA6B;YAC7B,IAAI,MAAc,CAAC;YACnB,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACrB,KAAK,EAAE,mDAAmD;qBAC3D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACvB,KAAK;yBACF,MAAM,CAAC,GAAG,CAAC;yBACX,IAAI,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;oBACjE,OAAO;gBACT,CAAC;gBACD,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAC7B,CAAC;YAED,MAAM,gBAAgB,CAAC,IAAI,CAAC;gBAC1B,QAAQ;gBACR,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;gBACjC,MAAM;aACP,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACjE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAEtB,MAAM,IAAI,GAAG,+BAA+B,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACrB,KAAK,EACH,kEAAkE;wBAClE,kEAAkE;wBAClE,iEAAiE;iBACpE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,cAAc,CACpD,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,WAAW,CACtB,CAAC;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,KAAK;qBACF,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CAAC,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,kBAAkB,CAC/B,OAAO,CAAC,UAAU,EAAE,EACpB,QAAQ,CAAC,OAAO,EAChB,2BAA2B,EAC3B,GAAG,CACJ,CAAC;YACF,KAAK,CAAC,IAAI,CAAC;gBACT,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC,kCAAkC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAClE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAEtB,MAAM,IAAI,GAAG,+BAA+B,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAC5C,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,WAAW,CACtB,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes/js-scripts.d.ts

@@ -0,0 +1,32 @@
+/**
+ * JS script run endpoint — `POST /api/js-scripts/:id/run`.
+ *
+ * The web app reads and writes scripts over `/trpc/jsScripts.*`; this is the
+ * one non-tRPC door, for the run/test console, mini apps, and the CLI harness.
+ *
+ * It executes the stored document through `runCodeBody` — the same core
+ * `run_code` and `test_code` already share — so a script run and a Code-node
+ * run are one execution path. The script's own envelope is what applies: its
+ * declared packages, its declared secrets, its timeout capped at
+ * `JS_SCRIPT_MAX_TIMEOUT_SECONDS`, and the Code-node toolbelt.
+ *
+ * The response is plain JSON, unless the request accepts
+ * `application/x-ndjson`. Then the run streams: one JSON line per agent
+ * message (text, tool calls, progress) and per emit as they happen, and a
+ * final `{type: "result"}` line with the body the JSON answer would carry.
+ * A mini app asks for the stream, so an agent inside a script shows its work
+ * while it runs instead of after.
+ */
+import type { SpanContext } from "@opentelemetry/api";
+import type { FastifyPluginAsync } from "fastify";
+import type { StorageAdapter } from "@nodetool-ai/storage";
+import { type HttpApiOptions } from "../http-api.js";
+interface RouteOptions {
+    apiOptions: HttpApiOptions;
+    storage?: StorageAdapter;
+}
+export declare function handleJsScriptRun(request: Request, id: string, opts: RouteOptions, parentSpanContext?: SpanContext): Promise<Response>;
+export declare function handleExampleAppScriptRun(request: Request, slug: string, key: string, opts: RouteOptions, parentSpanContext?: SpanContext): Promise<Response>;
+declare const jsScriptsRoutes: FastifyPluginAsync<RouteOptions>;
+export default jsScriptsRoutes;
+//# sourceMappingURL=js-scripts.d.ts.map

package/dist/routes/js-scripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"js-scripts.d.ts","sourceRoot":"","sources":["../../src/routes/js-scripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAuDlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAI3D,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAIhE,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;IAC3B,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AA6CD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,YAAY,EAClB,iBAAiB,CAAC,EAAE,WAAW,GAC9B,OAAO,CAAC,QAAQ,CAAC,CAuEnB;AA2SD,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,YAAY,EAClB,iBAAiB,CAAC,EAAE,WAAW,GAC9B,OAAO,CAAC,QAAQ,CAAC,CAkDnB;AAqHD,QAAA,MAAM,eAAe,EAAE,kBAAkB,CAAC,YAAY,CAiBrD,CAAC;eAEa,eAAe"}